161-java-profiling-detect
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
profile-java-process.shinteracts with the system by executing theasync-profilerbinary (asprof) and standard JDK utilities includingjcmd,jps,jstat, andjstackto gather metrics. It also includes a management feature to terminate the targeted Java process using thekillcommand.\n- [COMMAND_EXECUTION]: Therun-java-process-for-profiling.shscript automates build and execution tasks by spawningmvn(Maven) andjavaprocesses with specific profiling configurations.\n- [EXTERNAL_DOWNLOADS]: The skill requires an external binary distribution ofasync-profiler. Security risks are mitigated by the script's requirement for a 'trusted, pre-installed distribution' and the explicit refusal to download binaries at runtime.\n- [DATA_EXFILTRATION]: While the skill does not transmit data externally, it generates detailed runtime artifacts like JFR recordings and thread dumps. These files can expose sensitive application state and should be handled according to organizational data policies.
Audit Metadata